Animated network terminal visualization
01 — OVERVIEW

Three protocols, one internet

TCP and UDP move data between machines. TLS protects it along the way. Here's what each one actually does.

TCP

Transmission Control Protocol

TRANSPORT LAYER

A connection-oriented transport protocol that provides reliable, ordered delivery of data between applications, with built-in error detection and retransmission.

Reliable Ordered Handshake-based
TLS

Transport Layer Security

SECURITY / CRYPTOGRAPHIC LAYER

A cryptographic protocol that protects data exchanged between systems — encrypting it, verifying it hasn't been tampered with, and authenticating the server's identity.

Encryption Integrity Authentication
UDP

User Datagram Protocol

TRANSPORT LAYER

A connectionless transport protocol that prioritizes low overhead. It doesn't guarantee delivery or ordering, leaving that to the application when it's needed.

Connectionless Low overhead No handshake
02 — HOW THEY RELATE

Where each protocol sits

TCP and UDP are transport protocols. TLS is a security layer that runs above them — not a third alternative transport.

Application
HTTP · DNS · SSH · etc.
Security — TLS
Encryption · Integrity · Authentication
Transport — TCP / UDP
Delivery between applications
Internet
IPv4 / IPv6
Network Interface
Ethernet · Wi-Fi · etc.

Traditionally TLS runs on top of TCP (as with classic HTTPS). Modern protocols like QUIC instead combine TLS 1.3's cryptographic handshake directly with UDP — TLS still handles security, UDP still handles transport.

TCP — Transmission Control Protocol

Transport Layer · Connection-Oriented

TCP is a connection-oriented transport-layer protocol designed to provide reliable, ordered delivery of data between applications. Before any data is exchanged, the two sides establish a connection; once established, TCP tracks every byte sent so it can detect loss and retransmit as needed.

Connection-oriented
Reliable delivery
Ordered data
Error detection
Retransmission
Flow control
Congestion control
Three-way handshake
CLIENT
SYN →
SERVER
CLIENT
← SYN-ACK
SERVER
CLIENT
ACK →
SERVER
CLIENT
DATA → ACK →
SERVER

UDP — User Datagram Protocol

Transport Layer · Connectionless

UDP is connectionless and focuses on low overhead rather than guaranteed delivery. There's no handshake and no built-in retransmission — datagrams are simply sent. This makes it well suited to applications where avoiding connection-management overhead matters more than guaranteed delivery, though it isn't automatically faster in every situation; actual performance depends on the application and network conditions.

Connectionless
Low overhead
No guaranteed delivery
No guaranteed ordering
No protocol-level retransmission
Good for latency-sensitive apps
CLIENT SERVER

Each datagram travels independently — no acknowledgment is required at the protocol level.

TLS — Transport Layer Security

Security / Cryptographic Layer

TLS is a cryptographic protocol used to protect data exchanged between communicating systems. It provides three core security properties:

Encryption — protects transmitted data from being read by unauthorized parties.
Integrity — helps detect whether transmitted data has been modified.
Authentication — lets the client verify the server's identity through certificates and certificate validation.
Client
TLS Handshake
Certificate / Authentication
Key Establishment
Encrypted Application Data
Server

TLS normally runs above a transport protocol such as TCP. Modern protocols such as QUIC instead pair TLS 1.3's cryptographic handshake with UDP.

03 — COMPARISON

TCP vs UDP

Neither protocol is universally "better" — each trades reliability for overhead differently.

FeatureTCPUDP
ConnectionConnection-orientedConnectionless
ReliabilityYesNo built-in delivery guarantee
OrderingYesNo built-in ordering guarantee
RetransmissionYesNo
Flow controlYesNo
Congestion controlYesNo built-in TCP-style mechanism
OverheadHigherLower
Typical useWeb, APIs, file transfer, SSHDNS, streaming, gaming, real-time media
04 — REAL-WORLD USE

Where are these protocols used?

TCP
  • HTTPS connections traditionally carried over TCP
  • SSH
  • FTP
  • Email protocols
  • Database connections
  • Reliable application communication
UDP
  • DNS queries
  • VoIP
  • Real-time media
  • Online multiplayer networking
  • DHCP
  • Apps where application-managed reliability is useful
TLS
  • HTTPS
  • Secure APIs
  • Secure email transport
  • Secure application connections
  • Certificate-based server authentication

HTTPS commonly means HTTP protected by TLS. Modern HTTP/3 uses QUIC over UDP with TLS 1.3.

05 — PROTOCOL FLOW

See the conceptual flow

06 — QUICK SUMMARY

The short version

TCP
Reliable, ordered transport
UDP
Lightweight, connectionless datagrams
TLS
Cryptographic protection and authentication
ACTIVE PROTOCOL: TCP
USER DEVICE
NETWORK
SERVER
Connection-oriented: sequential ordered packets, handshake first.
04 — ABOUT THIS CONSOLE

EDUCATIONAL VISUALIZATION ONLY

FIREPROO NETWORK is a self-contained, front-end demonstration of how common network protocols behave conceptually. All handshake logs, packet counters, and terminal output are generated locally in your browser for illustration — nothing here connects to, scans, or transmits data to any real host. It's built for learning protocol fundamentals: OSI layers, ports, connection models, and encryption posture, at a glance.